Справочник Пользователя для 7signal INDR-EYE01
3 7signal Sapphire Connectivity
6
7signal Solutions Inc., 526 S. Main Street, Akron, Ohio 44311, USA, 855-763-9526, info@7signal.com,
www.7signal.com
7
sig
n
al
Sa
p
p
h
ire
D
ep
lo
yme
n
n
t
G
u
id
e R
ele
as
e 5
.0
3 7SIGNAL SAPPHIRE CONNECTIVITY
3.1 Communication security
All connections containing meaningful traffic are being encrypted. The used encryption methods are TLS
and SSL. The PKI infrastructure (certificates) is being used throughout the solution.
and SSL. The PKI infrastructure (certificates) is being used throughout the solution.
Every customer has individual set of certificates, delivered within containers called certificate packages. It
is not possible to use the delivered certificates to decrypt traffic of other 7signal Sapphire systems.
is not possible to use the delivered certificates to decrypt traffic of other 7signal Sapphire systems.
Q: Where can I find my certificates? All the customer certificates and certificate packages
are located in the Certificates CD.
are located in the Certificates CD.
It is neither necessary nor encouraged to handle the certificate container files. Install and upgrade
processes of 7signal Sapphire take care of all the typical cases. In untypical cases the 7signal staff shall
be involved with all the help necessary.
processes of 7signal Sapphire take care of all the typical cases. In untypical cases the 7signal staff shall
be involved with all the help necessary.
3.2 Supportive connections
3.2.1 SSH for Eye
SSH connection is required in deployment phase: IP address configuration is done with 7config command
line utility, and Carat server utilizes SSH connection when it is setting management traffic encryption
certificates in Eye units. Eye firmware can be also managed with SSH (not recommended normally).
line utility, and Carat server utilizes SSH connection when it is setting management traffic encryption
certificates in Eye units. Eye firmware can be also managed with SSH (not recommended normally).